Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VU3pKwQPLwJPeRXO-TCnjQsx92U.roa
File: VU3pKwQPLwJPeRXO-TCnjQsx92U.roa (raw, json)
Hash identifier: sBm50lKpCtUF5uhH4m7nBuerVgonVPRch45zP1QB0fU=
Subject key identifier: 55:4D:E9:2B:04:0F:2F:02:4F:79:15:CE:F9:30:A7:8D:0B:31:F7:65
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A49980758ED87D6C9613BE60E7DB4839B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VU3pKwQPLwJPeRXO-TCnjQsx92U.roa
Signing time: Thu 31 Aug 2023 03:16:54 +0000
ROA not before: Thu 31 Aug 2023 03:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:49:98:07:58:ed:87:d6:c9:61:3b:e6:0e:7d:b4:83:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 03:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554de92b040f2f024f7915cef930a78d0b31f765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:7e:b0:03:d6:02:17:38:a9:35:90:b5:c2:
e3:b8:0e:f7:74:e8:7a:72:73:21:be:82:ad:09:87:
fc:7d:6b:57:67:b5:6b:1d:5d:f1:60:c4:d9:d5:75:
c1:95:2f:1b:e9:92:d7:bf:57:46:73:cd:fb:d8:cc:
e0:24:2d:63:1d:f9:b5:e0:bc:61:1d:19:2f:67:28:
b8:78:55:ba:44:cd:92:2a:92:70:c0:ae:89:54:4c:
50:07:17:92:fa:4b:1a:4e:15:c2:f7:3c:8e:00:30:
d4:d3:6d:02:90:c0:d5:5b:4c:0d:e9:4e:cd:ee:58:
a5:48:9e:a0:8b:70:65:b7:ad:32:50:c3:ba:72:97:
81:f2:b0:79:5a:cc:51:02:da:02:71:1d:c0:72:24:
33:e7:3f:d5:63:49:2c:f5:7f:ad:07:98:0a:22:7c:
ea:0e:07:e5:56:a2:04:cd:96:ed:92:24:90:0f:fe:
d5:da:65:d3:1e:46:56:68:cf:15:1c:a6:3e:0b:13:
34:b4:4a:54:85:c7:1c:d4:5d:ed:20:0b:20:9a:6d:
c2:5d:e3:eb:5c:75:f2:26:9c:9b:68:e1:d7:a9:7e:
27:a9:f0:85:1e:4b:cf:aa:47:b9:c2:1a:b4:bf:46:
0b:83:a6:73:bb:7f:52:25:2f:b4:28:18:4e:64:4a:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:E9:2B:04:0F:2F:02:4F:79:15:CE:F9:30:A7:8D:0B:31:F7:65
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VU3pKwQPLwJPeRXO-TCnjQsx92U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:55:0d:65:39:58:6a:59:0a:b7:fb:81:42:3c:b1:a8:c6:d4:
dc:43:dd:63:b2:a7:0a:2c:7c:a0:51:53:a2:ff:bb:80:d9:5f:
e1:b8:48:4d:a4:8d:b3:44:62:70:54:ce:96:f5:e9:74:79:ba:
f9:b2:14:9f:6b:d3:f6:bf:28:a1:c0:35:77:45:4f:94:be:dd:
28:a6:0c:34:74:bb:12:ba:3d:29:88:17:de:0b:1c:b9:d6:28:
5d:b2:fb:c1:12:a8:89:c8:88:8c:37:87:5f:39:7d:ea:70:a4:
fb:be:92:a7:60:43:65:56:75:55:b7:e6:95:96:e8:ea:b7:04:
25:22:5a:37:a0:f2:a8:aa:06:56:c5:db:27:96:26:00:cd:57:
77:9b:ce:1b:23:a8:78:98:29:9a:ec:1e:06:a0:98:f0:ba:7c:
4f:dc:04:b4:7d:35:ae:31:ea:14:d8:f2:88:4f:46:73:87:49:
4c:29:8f:6b:ff:af:01:99:a0:59:f9:c2:5e:64:58:5f:c1:05:
ae:b1:9b:e9:9f:ae:1f:ca:49:dc:33:d5:00:b4:cb:5c:6f:d7:
94:10:be:42:a7:55:48:ef:6c:61:c4:9b:48:92:ba:2c:45:06:
47:f8:84:1b:57:e6:7f:bd:fb:f0:de:94:28:d3:11:b4:ec:f3:
ab:34:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:02 2025 by rpki-client